Tuesday, March 11, 2014

Brocade Switch: How To Do Policy Based Routing With Route-Maps

I have a customer that wanted to divide up how the users accessed the Internet.  They wanted some users to go out the 10Meg Internet, while others go out the 3Meg Internet circuit, while still the rest goes out the simple cable provider Internet.  Below is the topology (generically speaking) and below that is how I routed certain IPs across different Internets.  Keep in mind, if one Internet fails, you have to manually move over the traffic to another Internet circuit for them to have access.

ip route 0.0.0.0 0.0.0.0 192.168.1.1

access-list 101 deny ip 10.1.1.0 0.0.0.255 10.0.0.0 0.255.255.255
access-list 101 deny ip 10.1.1.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 101 deny ip 10.1.1.0 0.0.0.255 172.16.0.0 0.0.255.255
access-list 101 permit ip host 10.1.1.153 any
access-list 101 permit ip host 10.1.1.96 any
access-list 101 permit ip host 10.1.1.250 any
access-list 101 permit ip host 10.1.1.203 any
access-list 101 permit ip host 10.1.1.248 any
access-list 101 permit ip host 10.1.1.247 any
access-list 101 permit ip host 10.1.1.246 any

access-list 102 deny ip 10.1.1.0 0.0.0.255 10.0.0.0 0.255.255.255
access-list 102 deny ip 10.1.1.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 102 deny ip 10.1.1.0 0.0.0.255 172.16.0.0 0.0.255.255
access-list 102 permit ip host 10.1.1.245 any
access-list 102 permit ip host 10.1.1.244 any
access-list 102 permit ip host 10.1.1.243 any
access-list 102 permit ip host 10.1.1.241 any
access-list 102 permit ip host 10.1.1.240 any
access-list 102 permit ip host 10.1.1.239 any
access-list 102 deny ip any any
!
route-map  Internet permit  10
 match ip address  101
 set ip next-hop 10.30.1.1

route-map  Internet permit  20
 match ip address  102
 set ip next-hop 10.1.10.1

interface ve 5
ip policy route-map Internet

1 comment:

  1. Can you share your inside network(s) and what is the subnet for vlan 5?

    ReplyDelete

Your comment will be reviewed for approval. Thank you for submitting your comments.